Author: nion Date: 2007-10-31 18:50:52 +0000 (Wed, 31 Oct 2007) New Revision: 7161 Modified: data/CVE/list Log: CVE-2007-5690 zaptel affected but not a real security issue in debian CVE-2007-5689 fixed in sun-java6 6-03-1/sun-java5 1.5.0-13-1 Modified: data/CVE/list ==================================================================--- data/CVE/list 2007-10-31 18:18:24 UTC (rev 7160) +++ data/CVE/list 2007-10-31 18:50:52 UTC (rev 7161) @@ -34,9 +34,12 @@ - iceweasel 2.0.0.8-1 (low) TODO: check other ice-* CVE-2007-5690 (Buffer overflow in sethdlc.c in the Asterisk Zaptel 1.4.5.1 might ...) - TODO: check + - zaptel <unfixed> (unimportant; bug #448763) + NOTE: zaptel does copy argv[1] into ifr_name but zaptel is not suid root or something + NOTE: similar so this is no security issue in Debian even if sethdl-new will segfault CVE-2007-5689 (The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) ...) - TODO: check + - sun-java6 6-03-1 (medium) + - sun-java5 1.5.0-13-1 (medium) CVE-2007-5688 (Multiple SQL injection vulnerabilities in directory.php in the ...) TODO: check CVE-2007-5687 (Multiple buffer overflows in the rich text processing functionality in ...)